+44 7538 031949

Privacy Policy

Last Updated on 27 October 2026

OVERVIEW

This Privacy Policy explains how Online CEO Ltd ("we", "us", "our") collects, uses, and protects your personal information when you visit our websites, register for any of our trainings, events, or programmes, apply to work with us, sign up to our communications, or otherwise interact with us.

We are the data controller responsible for your personal data.

CONTACT DETAILS

  • Data controller: Online CEO Ltd (registered in England and Wales, company number 15044772)
  • ICO registration number: ZC253783
  • Registered address: 5 Railway Terrace, Buxton, Derbyshire, SK17 7AW
  • Email: [email protected]

1. WHAT INFORMATION WE COLLECT

Information you give us:

  • Name
  • Email address
  • Phone number
  • Business information you give us in an application, such as your company name and website, what your business sells, your ideal customer, your revenue range, your team, and your goals
  • Any other details you submit through our registration or application forms or when you message us.

Information we collect automatically when you use the site:

  • Device and browser type, operating system
  • IP address and approximate location
  • Pages visited, time on page, referring website, and how you interact with the site
  • Cookie and similar tracking data (see the Cookies section below).

We do not knowingly collect data from anyone under 18. Our trainings and programmes are intended for adults.

2. HOW AND WHY WE USE YOUR INFORMATION (LAWFUL BASES)

Under UK GDPR we must have a lawful basis for using your personal data. We rely on:

  • Consent: when you opt in to register for a training, event, or programme and to receive marketing emails and text messages from us, and when you click "Accept All" on a cookie banner. You can withdraw consent at any time.
  • Steps before entering into a contract, and our legitimate interests in assessing applications from businesses: when you apply to work with us (including on behalf of your company), we use the information in your application to assess whether we are the right fit and to prepare for any strategy call or proposal.
  • Legitimate interests: to operate, secure, and improve our website and services, to understand how our pages perform using cookie-free measurement tools, and to contact registered attendees about the training, event, or programme they signed up for. We balance this against your rights.
  • Legal obligation: where we must keep records or respond to lawful requests.

We use your information to:

  • Register you for a training, event, or programme and send you joining details, reminders, and replays by email, text message, or phone call
  • Review your application and assess whether we can work together
  • Send you marketing emails and text messages, offers, and related content (where you have consented)
  • Respond to your enquiries
  • Measure and improve our marketing and website performance
  • Keep our website secure and prevent fraud or abuse
  • Comply with our legal and regulatory obligations.

3. EMAILS, CALLS AND TEXT MESSAGES

If you agree to receive marketing when you register or apply on one of our forms, you may receive marketing emails and text messages about our trainings, events, products, and services. Our registration forms carry a tick box confirming that, by giving us your email address and phone number, you agree to receive emails and text messages from us.

You can stop either or both at any time. Use the unsubscribe link in any marketing email, reply STOP to any text message, or email us and tell us which you want to stop. You have an absolute right to object to direct marketing and you do not have to give a reason. Opting out of marketing will not stop essential service messages about a training, event, or programme you have actively registered for.

Calls and texts about a training, event, or programme you registered for. When you give us your phone number, we, or people working on our behalf, may call you or send you text messages about the training, event, or programme you registered for. For example, to confirm your place, remind you of the date and time, or tell you about any changes. If you would rather we did not call you, tell us by emailing [email protected] and we will stop calling you and contact you by email and text instead. You can also reply STOP to any text message to stop texts.

4. COOKIES AND TRACKING

We use cookies and similar technologies on some of our websites. Where a site uses non-essential cookies, a cookie banner appears when you first visit and lets you Accept All or Reject Non-Essential cookies. Non-essential cookies (including analytics and marketing or advertising cookies) are only set after you consent.

Categories we use:

  • Essential cookies: required for the site to function and stay secure, for example the short-lived security cookie our hosting provider Cloudflare sets to tell real visitors from automated bots (it expires after about 30 minutes) and, on sites with a cookie banner, the cookie that remembers your choice. These do not require consent.
  • Analytics cookies: help us understand how visitors use the site so we can improve it.
  • Marketing or advertising cookies: used to measure and improve our advertising and to show relevant ads.

On sites with a cookie banner, you can change or withdraw your cookie consent at any time by clearing the site cookies in your browser and reloading the page, which brings the banner back. You can also block or delete cookies through your browser settings, though some essential features may then not work.

Marketing and analytics cookies (on sites that use them, these load only if you click "Accept All" on that site's cookie banner):

  • Meta Pixel (Meta Platforms Ireland Ltd): measures the performance of our Facebook and Instagram advertising and helps us show relevant ads. It sets cookies such as _fbp and _fbc.
  • Microsoft Clarity (Microsoft Corporation): session and heatmap analytics showing how visitors use the page so we can improve it. It sets cookies such as _clck and _clsk.
  • OpenAI Measurement Pixel (OpenAI): measures how our advertising in ChatGPT performs. It records which ChatGPT ad brought you to our page and tells OpenAI when you register or buy, so we can see which ads work. It sets a first-party cookie, __oppref, to remember the ad click. If you enter your email address or phone number on one of our registration forms, the pixel may also send a scrambled (hashed) version of it to OpenAI to help match your registration to an ad.

These do not load until you give consent. If you click "Reject Non-Essential", none of them load and none of them receive anything. You can withdraw consent at any time by clearing your browser's cookies and site data.

Cookie-free measurement, font delivery and reviews display (these do not use cookies and run without a cookie banner):

  • Cloudflare Web Analytics (Cloudflare, Inc.): our websites are delivered through Cloudflare as part of our hosting, and a small script records basic information about page visits, such as the page viewed, the referring site, your country, device type and browser, and how quickly the page loaded, so we can see how our pages perform overall. It does not use cookies or local storage for this, does not track you across visits or websites, and does not build a profile of you. You can object at any time by blocking static.cloudflareinsights.com with a free browser content blocker, or by emailing us (see section 8, Your Rights). Cloudflare's separate security cookie is described under essential cookies above.
  • Google Fonts (Google LLC): the fonts on our pages are loaded from Google, which receives your IP address so it can deliver them.
  • Climbo reviews display (Climbo): shows our Trustpilot reviews on our pages. Your browser loads it from Climbo's servers, hosted on Amazon Web Services, which receive your IP address so they can deliver it. It does not use cookies; it saves a language setting and a temporary copy of the reviews in your browser's local storage so the reviews display correctly.

5. WHO WE SHARE YOUR INFORMATION WITH

We do not sell your personal data. We share it only with:

  • Service providers who help us run the business, such as our email and CRM platform, our website and form host (HighLevel), our hosting and content delivery provider (Cloudflare), our font provider (Google Fonts), our reviews display provider (Climbo), and our webinar and training platform (Zoom, below).
  • Zoom Video Communications, Inc. hosts our online trainings and events where they run on Zoom. When you register for one, your name and email address go to Zoom so that Zoom can register you and send you your own personal joining link. You enter them on Zoom's own registration page (Zoom's own privacy statement also applies there), or, where we have set this up for an event, our CRM passes them to Zoom automatically. Zoom is based in the United States.
  • Meta Platforms Ireland Ltd, Microsoft Corporation and OpenAI receive information, but only on sites that use their tools and only if you clicked "Accept All" on that site's cookie banner. It is the information described in the Cookies section above, and we use it to measure our advertising, show relevant ads, and improve our pages. For collecting and sending data through the Meta Pixel, Meta and we act as joint controllers, and Meta is responsible for its own later use of that data.
  • People working on our behalf, such as our event team, who call and text registered attendees about the training, event, or programme they registered for.
  • Professional advisers (lawyers, accountants) where necessary.
  • Authorities or regulators where we are legally required to.

Several of the providers named above are based in, or process data in, the United States. That includes our CRM and website platform, our hosting and content delivery provider, the platform that hosts our online events, and the analytics and advertising measurement providers. Where personal data leaves the UK we rely on the safeguards permitted by UK data protection law, which depending on the provider means UK adequacy regulations covering the country concerned, or contractual safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the Standard Contractual Clauses. If you would like more detail on the safeguards used for a particular provider, ask us.

6. HOW LONG WE KEEP YOUR INFORMATION

We keep your personal data for as long as you remain subscribed to our communications or have an ongoing relationship with us, and until you ask us to delete it or withdraw your consent. We may keep certain records for longer where we are required to for legal, tax, or regulatory reasons. If you apply to work with us and we do not proceed, we keep your application so we can reconsider it if you apply again or your circumstances change, and we delete it within 24 months of receiving it. If you also ticked the marketing box, we keep your name and contact details for marketing until you unsubscribe. You can ask us to delete your data at any time (see your rights below).

7. HOW WE PROTECT YOUR INFORMATION

We take reasonable technical and organisational measures to keep your data secure, including restricted access and use of reputable, secured third-party platforms. No method of transmission over the internet is 100 per cent secure, but we work to protect your information and to handle any breach in line with our legal obligations.

8. YOUR RIGHTS

Under UK GDPR you have the right to:

  • Be informed about how we use your data (this policy)
  • Access a copy of the data we hold about you (a Subject Access Request, which is free)
  • Have inaccurate data corrected
  • Have your data erased ("right to be forgotten")
  • Restrict or object to our processing, including objecting to direct marketing at any time
  • Data portability (receive your data in a usable format)
  • Withdraw consent at any time, where we rely on consent.

To exercise any of these rights, email us at [email protected]. We will respond within one month. There is no fee for a standard request.

If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner's Office (ICO):

  • Website: ico.org.uk
  • Helpline: 0303 123 1113

We would appreciate the chance to address your concerns first, so please consider contacting us before approaching the ICO.

9. THIRD-PARTY LINKS

Our website may link to other websites and social media platforms. This policy does not cover those sites. We are not responsible for their content or privacy practices, and we encourage you to read their privacy policies before sharing any information with them.

10. CHANGES TO THIS POLICY

We may update this policy from time to time. The latest version will always be on this page with the "Last Updated" date at the top. Your continued use of the site after changes are posted means you accept the updated policy.